Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
File:                     hg2fAamLUU69PCcj1_frRIMm9eI.mft (raw, json)
Hash identifier:          ThBKCrdiz4lsWyjEIoOtOkW6fDAZdzLfi5Dyil9cwac=
Subject key identifier:   A6:51:0A:72:7C:BB:6B:AD:78:45:FE:6D:52:16:B7:E9:5C:EF:2E:8C
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Certificate issuer:       /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial:       019D2C987318715D43EF5125B2A64A6637DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
Manifest number:          1890
Signing time:             Fri 27 Mar 2026 00:01:21 +0000
Manifest this update:     Fri 27 Mar 2026 00:01:21 +0000
Manifest next update:     Sat 28 Mar 2026 00:01:21 +0000
Files and hashes:         1: 7mhV_rdVlcfkhURFQ4wNrLsuU1c.roa (hash: VRlZTooxFrT0D1E6AOYVVz4EsX/5w5g/g1JyVqO9SPM=)
                          2: h_hShADtBIzeK-Szx9l4bfm8jag.roa (hash: hsH1pDZZoflDWpuxdoPCV7EaJcM0R+/7hC4hgh317+4=)
                          3: hg2fAamLUU69PCcj1_frRIMm9eI.crl (hash: hlz746GyFeEMAh8yfJETaJXdiwq+2iB50/WAjkbNS3A=)
                          4: rPAahRiAFhKEWjnyhz4z-0lkvXU.roa (hash: zzqyB+t4YAf4zoHDwM87ojkF2fRZqc5eAp62HCRrYX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:98:73:18:71:5d:43:ef:51:25:b2:a6:4a:66:37:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
        Validity
            Not Before: Mar 27 00:01:21 2026 GMT
            Not After : Mar 28 00:01:21 2026 GMT
        Subject: CN=a6510a727cbb6bad7845fe6d5216b7e95cef2e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b8:12:9b:16:0f:d0:80:13:bc:40:bd:ad:fb:
                    25:8e:18:0d:47:5a:b8:7f:b8:a9:6a:97:93:34:45:
                    19:d9:f6:37:bf:d4:59:c3:ae:f5:4d:c8:5c:48:81:
                    b3:51:f8:09:37:9f:f5:3f:0a:65:68:40:99:25:90:
                    d7:11:cb:d9:18:42:25:3b:cc:55:95:6e:73:04:80:
                    d0:11:6f:c3:3e:ba:17:e8:47:ab:bc:e3:66:ee:cc:
                    00:cd:1e:ae:74:50:3a:0f:04:95:bd:dc:2f:f8:d1:
                    27:6a:91:a9:d3:42:ad:93:7b:42:4c:9c:05:46:25:
                    da:4f:87:52:04:f8:ac:a4:7d:58:09:d8:ac:3c:5c:
                    1f:39:7c:dc:d3:83:0e:ba:ba:a9:f3:49:3e:b9:d5:
                    58:fe:a6:4a:61:67:cd:b8:95:1b:c7:e7:57:2b:d2:
                    61:a5:17:1b:28:c5:a7:e9:98:c0:47:eb:fd:a3:b7:
                    51:a1:35:14:8c:20:ff:fc:7f:03:e9:35:7e:78:14:
                    92:a9:6a:93:05:03:06:fa:30:f3:49:54:98:05:7d:
                    d5:ae:a2:70:7d:70:5a:3d:1a:91:e7:bb:fc:dd:57:
                    c0:e5:90:05:bf:48:75:c1:57:6e:20:7b:6c:ce:ec:
                    2a:52:6a:8d:61:f0:2e:29:92:52:d0:18:58:67:bc:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:51:0A:72:7C:BB:6B:AD:78:45:FE:6D:52:16:B7:E9:5C:EF:2E:8C
            X509v3 Authority Key Identifier:
                keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:94:ad:ce:a8:ab:86:92:d9:10:58:98:05:04:14:2a:0b:99:
         ae:f8:82:6c:5e:f5:54:b3:b9:87:cd:eb:f1:66:a3:3a:e4:32:
         43:a1:4b:2e:a1:c8:d5:3d:ae:05:56:21:60:44:d2:0d:9a:5d:
         35:a1:d5:a3:01:30:e0:95:a2:65:c0:08:5f:5a:35:2b:db:d0:
         d4:6f:9a:22:b1:a6:6e:e4:10:bc:bb:39:98:89:61:6f:d1:b7:
         99:75:d1:2e:94:7a:49:4d:5f:86:6b:16:15:56:ec:25:02:55:
         dc:c4:d6:01:4d:56:85:f3:d4:e5:b7:4f:b7:e5:9e:d6:c2:dd:
         63:52:46:76:4c:26:32:7d:7d:39:c5:0d:c3:7c:d6:18:ca:03:
         7d:5d:b3:98:52:f3:b0:ee:4e:09:c7:97:1d:0e:69:23:55:c7:
         74:3e:54:25:76:fd:30:75:08:a5:30:ab:17:22:c8:2a:66:48:
         3e:d1:4b:47:37:c4:b0:6c:cf:dd:8c:4a:6a:a9:8a:68:25:1d:
         95:ed:d8:02:bd:b7:f2:3a:41:c0:52:6e:10:47:24:83:f7:6e:
         ed:1e:5a:27:e9:79:13:fc:41:41:ab:0d:f8:db:0b:a6:94:04:
         c1:1c:0e:e3:99:09:57:89:3b:7a:3c:04:2e:6f:59:eb:12:ba:
         ed:f7:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:28:59 2026 by rpki-client